Comments (4)
The error does come from MSAL's HttpClient request to the STS, but the strack trace is not sufficient to understand what is happening. It could be an error from the server (400 or 401 response) which MSAL transforms in MsalServiceException
, a timeout, bad HTTP call (maybe the region string is bad?).
Next steps:
- Can you try to isolate the exception message ?
- It would also help to have some basic logs from the affected machines.
- Does the issue happen only in 1 region?
from microsoft-authentication-library-for-dotnet.
Unfortunately, we don't have any isolated exception to investigate. (We will add more telemetry around it)
The callback was captured from OS events during process crashes. It did happen across 21 regions according to our logs.
Since the ests-r has been turned off, now, we are flagged in s360. Any guidance for next step? Thanks!
from microsoft-authentication-library-for-dotnet.
Guidance would be to add logging and some monitoring as well, and run in pre-prod env or in a low traffic env to identify the root cause.
How is it failing in the 21 regions? All 100% of calls fail? This would indicate that the region strings are wrong. See here for region list.
Also, regional auth is fully tied to sending certificate chain. Not sure why it's an option in your code, but that flag should always be true.
from microsoft-authentication-library-for-dotnet.
The issue did happen across regions. But it doesn't seem to be 100% fail but an intermittent issue. I am working on adding the logs and monitoring and will let you know once I have more details.
Regarding the option of sending certificate chain, I believe we can safely remove it since it was enabled by default
from microsoft-authentication-library-for-dotnet.
Related Issues (20)
- [Engineering task] Implement Claims API to Bypass Cache When Claims are Present in MSAL with Managed Identity HOT 2
- Question on "Get AccessToken by RefreshToken with scope"
- [Bug] My MSAL Public client application is not able to get tokens from the token cache.
- [Bug] Landscape and portrait not working as expected in some of the devices
- Question: Prompt.ForceLogin not work
- [Feature Request] Need a method to Clear App Token Cache for Confidential Client HOT 4
- [Bug] Version 4.61.3 seems to bring about very significant increases in token endpoint and metadata request volumes
- [Engineering task] MSAL Builds should verify package signing
- [Bug] WAM mode throwing "authentication_canceled" exception
- AbstractAcquireTokenParameterBuilder<T>.WithAdfsAuthority throws with a null TenantId when the authority host Uri ends in `/adfs` HOT 4
- [Bug] AcquireTokenInteractive with WithUseEmbeddedWebView stopped working after upgrading library from version 4.58.1 to 4.62.0 HOT 2
- Persist token cache in encrypted format to file in linux container image HOT 2
- [Feature Request] Caller SDK details in ExtraQueryParams HOT 14
- [Bug] SHA2 changes break custom claims HOT 2
- [Bug] Test Labels for Managed Identity HOT 1
- [Engineering task] InteractiveConsentPromptAsync test is failing.
- Grant type=password doesn't work with SN+I when trying to get access token HOT 5
- [Bug] Incorrectly Encoded JWK Format in RSA Public Key Export
- [Engineering task] Fix CG alert on DevApp
- [Bug] Fix the MAUI Dev App Warnings HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from microsoft-authentication-library-for-dotnet.